[Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Jerome Schlumberger
Hello everybody, Two weeks ago I had some problems with a zip filed detected by clamav as "Oversized Zip". I read the posts and changed the libclamav/scanners.c, the line 64 as explained to the value of 50. After that everything worked well. But two days ago, same story, an "Oversized Zip" was

RE: [Clamav-users] Exploit.IFrame.Gen - description ?

2003-11-27 Thread Diego d'Ambra
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Michael V. Khaletsky > Sent: 26. november 2003 19:27 > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Exploit.IFrame.Gen - description ? > >There is nothing bad in this code according to m

[Clamav-users] YUM repository (Was: unofficial apt source for clamav 0.65 debian packages

2003-11-27 Thread Krištof Petr
ThistleAir Computing wrote: Have you thought about having the rpms available for Red Hat via apt as well? I was thinking of the Freshrpms or Fedora feeds. If you could that would be great as they handle most of my software updates via apt/synaptic. Using apt for rpmbased systems is not good id

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread J.D. Bronson
At 03:03 AM 11/27/2003, you wrote: Hello everybody, Two weeks ago I had some problems with a zip filed detected by clamav as "Oversized Zip". I read the posts and changed the libclamav/scanners.c, the line 64 as explained to the value of 50. After that everything worked well. But two days ago, sa

[Clamav-users] Re: clamdscan doesn't find virus while clamscan does

2003-11-27 Thread Martin Schitter
On Wed, Nov 26, 2003 at 09:28:26PM +0100, Martin Schitter wrote: > > i didn't see any change in this behavior after an update from 0.60 to 0.65 well -- after some general update of my servers (libc etc.) it finally works! but i still can't tell you the exact reason for the strange troubles yester

[Clamav-users] Updated: OpenBSD Clamav Port (stable)

2003-11-27 Thread Flinn Mueller
I just received a quite a few patches from LOYET Jerome . The most important patch enables Milter. This also enables bzlib, which I think was a problem with the first version of the port. Most of the patches are not import, but they get rid of other warning messages we get on OpenBSD. I do not u

[Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Michael V. Khaletsky
Hello, We have installed clamav-milter into Debian with Sendmail. It works. Unfortunately not all our users are happy of the situation when they cannot get e-mails with viruses in them. Is it possible to mark infected e-mail as infected but do not delete it and st

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
At 11:11 AM 11/27/03, you wrote: >Unfortunately not all our users are happy of the situation >when they cannot get e-mails with viruses in them. You've got to be kidding. Did the user take the hint when you had trouble replying because you were laughing too hard? ---

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Eduardo Kaftanski
On Thu, Nov 27, 2003 at 12:25:01PM -0800, Brian W. Antoine wrote: > At 11:11 AM 11/27/03, you wrote: > >Unfortunately not all our users are happy of the situation > >when they cannot get e-mails with viruses in them. > > You've got to be kidding. Did the user take the hint when you had

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Antony Stone
On Thursday 27 November 2003 7:11 pm, Michael V. Khaletsky wrote: > Hello, > We have installed clamav-milter > into Debian with Sendmail. > It works. > Unfortunately not all our users are happy of the situation > when they cannot get e-mails with viruses in them. Um >

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Christoph Cordes
Hello Brian, Thursday, November 27, 2003, 9:25:01 PM, you wrote: BWA> At 11:11 AM 11/27/03, you wrote: >>Unfortunately not all our users are happy of the situation >>when they cannot get e-mails with viruses in them. BWA> You've got to be kidding. Did the user take the hint when you h

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian Bruns
- Original Message - From: "Eduardo Kaftanski" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 27, 2003 3:54 PM Subject: Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ? > On Thu, Nov 27, 2003 at 12:25:01PM

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Antony Stone
On Thursday 27 November 2003 9:10 pm, Christoph Cordes wrote: > BWA> You've got to be kidding. Did the user take the hint when you had > BWA> trouble replying because you were laughing too hard? > > Why kidding? Just see it like this: The system doesn´t deliver a message > that is adressed to a

[Clamav-users] Cygwin: MD5 Verification Error

2003-11-27 Thread Glenn Mabbutt
Hi there. I've recently come across clamAV, and it looks like a useful piece of software. I'm having some trouble with it on the latest Cygwin (updated today); I've ran "./configure --disable-clamav", which built the Makefile (although it said something about not seeing GNU MP, which is odd as I

[Clamav-users] Clamd hangs

2003-11-27 Thread Scott Deacon
Environment - OpenBSD 3,3, Flinn's Clamav .65 port, Marc's smtp-vilter 1.1.0 rc2 I get this in the maillog: Nov 27 11:58:01 betty sm-mta[107]: hARGw0H6000107: from=<[EMAIL PROTECTED]>, size=5295, class=-100, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=fw1.easydns.com [216.

RE: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread LOYET Jerome
Hi, I think that what you want to do is very bad. It's not a solution. It's your choice!!! But I've quickly made a patch that will modify the clamav 0.65 sources in order to do what you want. I've add a --warning=MESSAGE or a -w argument to clamav-milter. If one of this two argument is present

Re: [Clamav-users] Cygwin: MD5 Verification Error

2003-11-27 Thread Glenn Mabbutt
Nevermind, I didn't realize you had to run "freshclam" to grab an initial virus definitions database. My bad. Problem solved :) Glenn - Original Message - From: "Glenn Mabbutt" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 27, 2003 5:27 PM Subject: [Clamav-users]

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Tomasz Kojm
On Thu, 27 Nov 2003 18:03:06 +0900 Jerome Schlumberger <[EMAIL PROTECTED]> wrote: > Can someone explain me about the libclamav/scanners.c and this value > at the line 64 ? Should I increase it again ? Please set it to 70 - we need to find an optimal value. Best regards, Tomasz Kojm -- oo

[Clamav-users] Autochecking script for clamd

2003-11-27 Thread Brian Bruns
Heya, For all of you who have concerns about clamd crashing/dying, attached is a simple shell script (ripped from the eggdrop botchk script) that basically checks to see if clamd is running, and if not, restarts clamd. Simple to use, and works like a charm. -- Brian Bruns

[Clamav-users] Clam 0.65 and Dazuko

2003-11-27 Thread Rick Cooper
Has something changed with the way clam interacts with Dazuko? Have been having problems with clamd dropping out and, of course, when it does the directory that clamuko is watching becomes inaccessable. So I commented out all of the Dazuko information and restarted clamd and still had the same prob

Re: [Clamav-users] Oversized Zip, again ...

2003-11-27 Thread Jerome Schlumberger
Ok, I am going to try this, but could you explain to the list what is the point of this parameter ? I'll be back if it doesn't work Thanks for your help Schlum On Friday 28 November 2003 07:54, Tomasz Kojm wrote: > On Thu, 27 Nov 2003 18:03:06 +0900 > > Jerome Schlumberger <[EMAIL PROTECTED]> w

Re: [Clamav-users] Autochecking script for clamd

2003-11-27 Thread Odhiambo Washington
* Brian Bruns <[EMAIL PROTECTED]> [20031128 03:03]: wrote: > Heya, > > For all of you who have concerns about clamd crashing/dying, attached is a > simple shell script (ripped from the eggdrop botchk script) that basically > checks to see if clamd is running, and if not, restarts clamd. Simple to

Re: [Clamav-users] Autochecking script for clamd

2003-11-27 Thread Brian Bruns
Crap, I guess I did miss it. Sorry :) -- Brian Bruns The Summit Open Source Development Group Open Solutions For A Closed World / Anti-Spam Resources http://www.sosdg.org The AHBL - http://www.ahbl.org - Original Message - From: "Odhiambo Washington" <[EMAIL PROTE

Re: [Clamav-users] Autochecking script for clamd

2003-11-27 Thread Brian Bruns
Well, I should have put this in the last message. I guess the one I threw together doesn't require anything special (doesn't need daemontools), and only needs bash. I have a habit of writing things very simply to be as small and lightweight as possible :) -- Brian Bruns Th

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
At 01:10 PM 11/27/03, you wrote: >Hello Brian, > >Thursday, November 27, 2003, 9:25:01 PM, you wrote: > >BWA> At 11:11 AM 11/27/03, you wrote: >>>Unfortunately not all our users are happy of the situation >>>when they cannot get e-mails with viruses in them. > >BWA> You've got to be kiddi

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
At 01:21 PM 11/27/03, you wrote: >- Original Message - >From: "Eduardo Kaftanski" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Thursday, November 27, 2003 3:54 PM >Subject: Re: [Clamav-users] clamav-milter: is it possble to mark infected >e-mail, but still deliver it to addressee ?